feat(auth): migrate device secrets on android

packages/auth/amplify_auth_cognito/android/src/main/kotlin/com/amazonaws/amplify/amplify_auth_cognito/AmplifyAuthCognitoPlugin.kt

@@ -103,6 +103,16 @@ open class AmplifyAuthCognitoPlugin :
     )
   }
 
+  /**
+   ASF Device Secrets Storage.
+   */
+  private val asfDeviceSecretsStore: LegacyKeyValueStore by lazy {
+    LegacyKeyValueStore(
+      applicationContext!!,
+      "AWS.Cognito.ContextData"
+    )
+  }
+
   override fun onAttachedToEngine(binding: FlutterPlugin.FlutterPluginBinding) {
     Log.d(TAG, "onAttachedToEngine")
     applicationContext = binding.applicationContext
@@ -241,7 +251,7 @@ open class AmplifyAuthCognitoPlugin :
    *  - https://github.com/aws-amplify/aws-sdk-android/blob/main/aws-android-sdk-cognitoauth/src/main/java/com/amazonaws/mobileconnectors/cognitoauth/util/ClientConstants.java
    */
   override fun getLegacyCredentials(identityPoolId: String?, appClientId: String?, callback: (Result<LegacyCredentialStoreData>) -> Unit) {
-    val data = LegacyCredentialStoreData.builder()
+    val data = LegacyCredentialStoreDataBuilder()
 
     if (appClientId != null) {
       val lastAuthUser = legacyUserPoolStore["CognitoIdentityProvider.$appClientId.LastAuthUser"]
@@ -273,6 +283,64 @@ open class AmplifyAuthCognitoPlugin :
     callback(Result.success(data.build()))
   }
 
+  /**
+   * Get Legacy Device Secrets
+   */
+  override fun fetchLegacyDeviceSecrets(
+    userPoolId: String?,
+    appClientId: String?,
+    callback: (Result<LegacyDeviceDetailsSecret?>) -> Unit
+  ) {
+    val data = LegacyDeviceDetailsBuilder()
+
+    if (appClientId != null) {
+      val lastAuthUser = legacyUserPoolStore["CognitoIdentityProvider.$appClientId.LastAuthUser"]
+
+      val newLegacyDeviceSecretsStore = LegacyKeyValueStore(
+        applicationContext!!,
+        "CognitoIdentityProviderDeviceCache.$userPoolId.$lastAuthUser"
+      )
+
+      val deviceKey = newLegacyDeviceSecretsStore["DeviceKey"]
+      val deviceSecret = newLegacyDeviceSecretsStore["DeviceSecret"]
+      val deviceGroup = newLegacyDeviceSecretsStore["DeviceGroupKey"]
+
+      data.apply {
+        this.deviceKey = deviceKey
+        this.deviceSecret = deviceSecret
+        this.deviceGroupKey = deviceGroup
+      }
+
+    }
+
+    val asfDeviceId = asfDeviceSecretsStore["CognitoDeviceId"]
+    data.apply {
+      this.asfDeviceId = asfDeviceId
+    }
+
+    callback(Result.success(data.build()))
+  }
+
+  /**
+   * Delete Legacy Device Secrets
+   */
+  override fun deleteLegacyDeviceSecrets(userPoolId: String?, appClientId: String?, callback: (Result<Unit>) -> Unit) {
+    if (appClientId != null) {
+      val lastAuthUser = legacyUserPoolStore["CognitoIdentityProvider.$appClientId.LastAuthUser"]
+
+      val legacyDeviceSecretsStore = LegacyKeyValueStore(
+        applicationContext!!,
+        "CognitoIdentityProviderDeviceCache.$userPoolId.$lastAuthUser"
+      )
+
+      legacyDeviceSecretsStore.clear()
+    }
+
+    asfDeviceSecretsStore.clear()
+
+    callback(Result.success(Unit))
+  }
+
   /**
    * Clears the legacy credentials set by the Android SDK
    */
@@ -572,3 +640,19 @@ class LegacyCredentialStoreDataBuilder(
     idToken,
   )
 }
+
+fun LegacyDeviceDetailsSecret.Companion.builder() = LegacyDeviceDetailsBuilder()
+
+class LegacyDeviceDetailsBuilder(
+  var deviceKey: String? = null,
+  var deviceSecret: String? = null,
+  var deviceGroupKey: String? = null,
+  var asfDeviceId: String? = null,
+) {
+  fun build(): LegacyDeviceDetailsSecret = LegacyDeviceDetailsSecret(
+    deviceKey,
+    deviceSecret,
+    deviceGroupKey,
+    asfDeviceId,
+  )
+}

packages/auth/amplify_auth_cognito/android/src/main/kotlin/com/amazonaws/amplify/amplify_auth_cognito/LegacySecretHandler.txt

@@ -0,0 +1,26 @@
+package com.amazonaws.amplify.amplify_auth_cognito
+
+import android.content.Context
+import io.flutter.plugin.common.PluginRegistry
+
+class LegacySecretHandlerImpl(private val context: Context) : LegacySecretHandler, MethodChannel.MethodCallHandler {
+
+    private val channel = MethodChannel(registrar.messenger(), "com.amazonaws.amplify/amplify_auth_cognito")
+
+    fun fetchLegacyDeviceSecrets(userPoolConfig: CognitoUserPoolConfig?): LegacyDeviceDetails?{
+        return null
+    }
+
+    fun deleteLegacyDeviceSecrets(userPoolConfig: CognitoUserPoolConfig?) {
+        channel.invokeMethod("deleteLegacyDeviceSecrets", userPoolConfig?.poolId)
+    }
+
+    fun onMethodCall(call: MethodCall, result: MethodChannel.Result) {
+        if (call.method == "getDeviceId") {
+            result.success(getDeviceId())
+        } else {
+            result.notImplemented()
+        }
+    }
+
+}

packages/auth/amplify_auth_cognito/darwin/Classes/AmplifyAuthCognitoPlugin.swift

@@ -171,5 +171,35 @@ public class AmplifyAuthCognitoPlugin: NSObject, FlutterPlugin, NativeAuthBridge
     func clearLegacyCredentials(completion: @escaping (Result<Void, Error>) -> Void) {
         preconditionFailure("clearing legacy credentials via method channel is not supported in iOS/macOS")
     }
+
+    func fetchLegacyDeviceSecrets(userPoolId: String?, appClientId: String?, completion: @escaping (Result<LegacyDeviceDetailsSecret?, Error>) -> Void) {
+        guard let appClientId = appClientId else {
+            completion(.failure(FlutterError(code: "AmplifyException", message: "appClientId is required", details: nil)))
+            return
+        }
+
+        let userDefaults = UserDefaults.standard
+        let deviceSecrets = LegacyDeviceDetailsSecret(
+            deviceKey: userDefaults.string(forKey: "\(appClientId).deviceKey"),
+            deviceGroupKey: userDefaults.string(forKey: "\(appClientId).deviceGroupKey"),
+            devicePassword: userDefaults.string(forKey: "\(appClientId).devicePasswrd"),
+            asfDeviceId: userDefaults.string(forKey: "\(appClientId).asfDeviceId")
+        )
+        completion(.success(deviceSecrets))
+    }
+
+    func deleteLegacyDeviceSecrets(userPoolId: String?, appClientId: String?, completion: @escaping (Result<Void, Error>) -> Void) {
+        guard let appClientId = appClientId else {
+            completion(.failure(FlutterError(code: "AmplifyException", message: "appClientId is required", details: nil)))
+            return
+        }
+
+        let userDefaults = UserDefaults.standard
+        userDefaults.removeObject(forKey: "\(appClientId).deviceGroupKey")
+        userDefaults.removeObject(forKey: "\(appClientId).deviceKey")
+        userDefaults.removeObject(forKey: "\(appClientId).devicePassword")
+        userDefaults.removeObject(forKey: "\(appClientId).asfDeviceId")
+        completion(.success(()))
+    }
 
 }